Privacy

What Vendera stores, where it goes, and what it never does.

Who is responsible

The controller for the purposes of the General Data Protection Regulation is:

Mert Filizay
Sommerstraße 54d
81543 München, Germany
info@appvendera.com

Write to that address for anything on this page, including a request to see or delete your data.

Using Vendera without an account

Your words, their meanings and your review history are stored on your device and nowhere else. Capture, editing, search, review and the home-screen widget all work this way, offline included. Nothing you write is sent anywhere.

One request does leave. When the app opens it asks our server whether you are signed in, because it cannot tell on its own. That question carries no words and no notes, but like any request to any website it shows your IP address to the server answering it. Nothing is stored from it.

Because it is only on your device, it is only as safe as your device. Deleting the app, erasing its data or losing the phone loses the words with it. An account is the only thing that gives you a copy somewhere else.

Using Vendera with an account

Your email address

Used to sign you in, to confirm the address when you sign up, and to send a code if you forget your password. It reaches Resend, who deliver those messages, and nobody else.

Your vocabulary

The words you save, your own notes on them, and your review schedule, so they follow you between devices.

Your password

Stored only as a scrypt hash. It cannot be read back, by us or by anyone who obtained the database. If you sign in with Apple or Google there is no password at all; we receive only the provider's stable identifier for you and your email address.

Sign-in attempts that fail

The address that was tried, and a one-way hash of the caller's IP address, kept for up to 24 hours. This is what stops someone guessing passwords. The hash cannot be turned back into an address.

What the AI cost

For each meaning generated, how many tokens it used and what that came to, kept for 30 days so your daily allowance can be counted. Not the word, and not the meaning.

Technical logs kept by our hosting provider may contain an IP address for a short period. They are used to keep the service running and to investigate abuse, not to build a picture of you.

The AI

When you ask Vendera to explain a word, that word, and the sentence you saved with it if you saved one, is sent to Anthropic to generate the meaning, along with the two languages you picked in Settings. Anthropic does not use API content to train its models. If you write meanings yourself, nothing is sent at all.

This happens when you ask for it. It can also happen on its own for newly captured words, but only if you switch on Explain new words automatically in Settings, which is off until you do.

Anthropic processes this in the United States, so asking for an AI meaning transfers that word outside the European Economic Area. The transfer is covered by the data processing terms and standard contractual clauses in Anthropic's commercial agreement. You can avoid it entirely by writing meanings yourself; the feature is off until you turn it on.

Why we are allowed to hold it

• To give you the service you asked for, which is Article 6(1)(b). Your email, your password hash and your vocabulary exist because an account cannot sync without them.
• Because you asked for it, which is Article 6(1)(a). Sending a word to the AI happens on a tap, or automatically for new words if you switch that on yourself. Either way it is off until you choose it, and you can switch it back off.
• Because the service has to stay up, which is Article 6(1)(f). Short-lived server logs, the count of failed sign-ins and the hashed caller address beside it exist to stop somebody guessing their way into an account.

Who else sees it

• Turso, the database, in the European Union.
• Vercel, which serves the app and runs its server code.
• Resend, which delivers the sign-in and password-reset emails.
• Anthropic, only when you ask for an AI meaning, as described above.
• Apple or Google, only if you choose to sign in with them, and then only to confirm who you are.

Each of them processes this on our instructions and for no purpose of their own. Nothing is sold, and nothing is shared for advertising.

Reminders

If you turn reminders on, the app asks your phone for permission and then schedules them on the device itself. There are no push notifications and no server involved, so no word of yours leaves the phone to make one happen. A reminder does put one of your words on the Lock Screen, which is worth knowing if somebody else can see it. Turning the switch off removes every one that was scheduled.

How long it is kept

• Your account and your vocabulary: until you delete them.
• Sign-in codes, and failed sign-in attempts: 24 hours.
• What the AI cost: 30 days.
• Records of what you deleted, which is how your other devices find out: 90 days.
• Individual review events, after which they are folded into a running total: 180 days.

Server logs are kept by the hosting provider for a short period and then rotated away.

What Vendera does not do

• No advertising, and no advertising identifiers.
• No analytics or usage tracking, first- or third-party.
• No selling or sharing of anything, to anyone, ever.
• No location, contacts, camera, microphone or photo access. None is requested.
• No profiling, no automated decisions with legal effect, and no tracking across other apps or websites.
• This website sets no cookies and loads nothing from anyone else.

Your rights

Under the GDPR you can ask for a copy of what we hold about you, ask for it to be corrected or deleted, ask us to restrict what we do with it, object to processing based on legitimate interests, and ask for it in a portable form. Where processing rests on your consent, you can withdraw it at any time, which does not affect what happened before you did.

Two of these need no request at all. Export deck in Settings hands you everything in a file. Delete account in Settings removes your email address, every word, every note and your whole review history from the server, immediately and irreversibly. Afterwards the app keeps working as a local deck with no account.

For anything else, write to info@appvendera.com. You also have the right to complain to a supervisory authority, which in Germany is the data protection authority of the state you live in.

Children

Vendera is not directed at children under 13 and does not knowingly collect anything from them.

Changes

If this policy changes in a way that affects what is collected or where it goes, the date below changes with it.

Last updated 20 September 2026 · Vendera · Impressum